!UKDpaKNNsBpOPfLWfX:zhaofeng.li

Colmena

335 Members
A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena119 Servers

Load older messages


SenderMessageTime
23 Jun 2022
@blaggacao:matrix.orgDavid Arnold (blaggacao)How to reach it? And does it comply to any sort of colmena-nixos interface?14:25:43
@huyage:matrix.orglemmalamma
In reply to @schnecfk:ruhr-uni-bochum.de
I'm not really helpful here, but just for clarification: Are you referring to these Issues? https://github.com/zhaofengli/colmena/issues/42 and https://github.com/zhaofengli/colmena/issues/68
I've also successfully used Pulumi instead of Terraform for provisioning and Colmena takes over after that. I still dream of a world where I can do both with Nix.
18:34:34
@huyage:matrix.orglemmalamma
In reply to @dantefromhell:matrix.org
I was reading on github a bit about bootstrapping w/ colmena and the general answer was "no - because it requires state tracking".

I was pondering if the approach to introduce a `colmena bootstrap` action to isolate bootstrapping from applying would remove the need for tracking state?
By bootstrap do you mean provisioning? Apparently some people think it doesn't not necessarily require state: https://www.bejarano.io/terraform-stateless/
18:38:13
@huyage:matrix.orglemmalamma
In reply to @dantefromhell:matrix.org
I was reading on github a bit about bootstrapping w/ colmena and the general answer was "no - because it requires state tracking".

I was pondering if the approach to introduce a `colmena bootstrap` action to isolate bootstrapping from applying would remove the need for tracking state?
* By bootstrap do you mean provisioning? Apparently some people think it does not necessarily require state: https://www.bejarano.io/terraform-stateless/
18:38:57
@mutantmell:helveticastandard.commutantmell joined the room.23:43:51
24 Jun 2022
@dantefromhell:matrix.orgdantefromhell
In reply to @schnecfk:ruhr-uni-bochum.de
I'm not really helpful here, but just for clarification: Are you referring to these Issues? https://github.com/zhaofengli/colmena/issues/42 and https://github.com/zhaofengli/colmena/issues/68
thx for clarification: Yes.
In particular #68 but #42 includes some hints towards bootstrapping/ first OS install.
02:10:10
@dantefromhell:matrix.orgdantefromhellI am not looking to automate provisioning of cloud resources (aka their creation) with colmena but the first OS installation (bootstrapping) of cloud and physical servers.02:11:17
@huyage:matrix.orglemmalammaRedacted or Malformed Event02:33:58
@huyage:matrix.orglemmalamma
In reply to @dantefromhell:matrix.org
thx for clarification: Yes.
In particular #68 but #42 includes some hints towards bootstrapping/ first OS install.
I had no idea people use Nix for this. I used to do PXE boot. But now most IaaS bundle those 2 things together. For example, you ask for (provision) an EC2 instance running an AMI image (bootstrap). Is your use case like a local bare metal setup?
02:38:38
@hexa:lossy.networkhexahm, when I set up wireguard tunnels through networkd and I store secrets in /run/keys, with colmena I have a wireguard-privatekey-key.service unit10:46:21
@hexa:lossy.networkhexahow do I tie that into networkd while making sure that networkd does in fact setup the WAN networking so I can provide those keys10:46:48
@hexa:lossy.networkhexawith morph I had an action to restart networkd post upload10:49:35
@hexa:lossy.networkhexaand let networkd fail on bootup10:49:45
@hexa:lossy.networkhexawith a networkd-restart.service that waits for wireguard-privatekeys-keys.service? 😄11:04:39
@linus:schreibt.jetztLinux Hackerman hexa: set postStart on the key unit, to run networkctl reconfigure $if? 11:04:52
@linus:schreibt.jetztLinux HackermanNot sure a restart is even needed?11:04:59
@hexa:lossy.networkhexaoh yeah, that sounds neat11:05:11
@linus:schreibt.jetztLinux HackermanOr yeah a separate service could be cleaner.11:05:18
@hexa:lossy.networkhexaI can't really be arsed to enumerate the repositories11:05:22
@hexa:lossy.networkhexa * I can't really be arsed to enumerate the interfaces11:05:30
@linus:schreibt.jetztLinux HackermanJust reconfigure then :D11:05:44
@hexa:lossy.networkhexawell, now it feels obvious 😄11:08:14
@hexa:lossy.networkhexaI think I was stuck in my head somewhere11:08:21
@linus:schreibt.jetztLinux HackermanHappens :D11:09:32
@hexa:lossy.networkhexa
❯ colmena build
[INFO ] Using configuration: /home/hexa/git/hexa/nixos-servers/config/hive.nix
[INFO ] Enumerating nodes...
error: attribute 'type' missing

       at /nix/store/agbalx3d9vi1sd132w5qs4p6i3brya1f-nixos-22.05-src/lib/modules.nix:615:26:

          614|           else if optionDecls != [] then
          615|               if all (x: x.options.type.name == "submodule") optionDecls
             |                          ^
          616|               # Raw options can only be merged into submodules. Merging into
       Did you mean _type?
(use '--show-trace' to show detailed location information)
[ERROR] -----
[ERROR] Operation failed with error: Child process exited with error code: 1
11:28:23
@hexa:lossy.networkhexathis is a fun one.11:28:34
@hexa:lossy.networkhexabecause nowhere in the trace there is a reference to the module in question11:28:54
@hexa:lossy.networkhexa

do people tend to write scripts around colmena for:

  • apply boot
  • reboot
  • unlock
  • upload secrets
13:15:17
@hexa:lossy.networkhexa with morph I could do morph deploy default.nix boot --reboot --upload-secrets 13:15:32
@hexa:lossy.networkhexaand colmena seems to upload secrets uploadAt=post-activation on applies with goal=boot directly after uploading the closure13:16:39

Show newer messages


Back to Room ListRoom Version: 6